Commit Graph

3 Commits (840916ae1bf136a566727505613772d8c687b8bb)

Author SHA1 Message Date
Justin 351c01cf7e Do not allow pods in one namespace to create certificates for hostnames from another namespace. (#54)
* Do not allow pods in one namespace to create certificates for hostnames from another namespace.

* Make cluster domain configurable, clean up shouldMutate() logic, and make namespace restrictions configurable with restrictCertificatesToNamespace.

* Return certificate hostname validation errors in the admission webhook response.

* Appease the gometalinter.
6 years ago
Mike Malone 0c53b0f310 rename cluster role & binding to match other binding names 6 years ago
Mike Malone 042e36da65 autocert 6 years ago